CVE-2026-40799 — WordPress Simple Cloudflare Turnstile plugin <= 1.38.0 - Broken Authentication vulnerability

CVE-2026-40799

WordPress Simple Cloudflare Turnstile plugin <= 1.38.0 - Broken Authentication vulnerability PUBLISHED

Description (CNA)

Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.

Vendor / product	Versions
RelyWP / Simple Cloudflare Turnstile	affected n/a through 1.38.0

CWE-288

CISA-ADP

No English description supplied.

No references supplied.